Analysis
-
max time kernel
119s -
max time network
125s -
platform
windows7_x64 -
resource
win7-20240611-en -
resource tags
arch:x64arch:x86image:win7-20240611-enlocale:en-usos:windows7-x64system -
submitted
14/06/2024, 16:34
Behavioral task
behavioral1
Sample
aab2ed8ded5658198597df85086a723d_JaffaCakes118.pdf
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
aab2ed8ded5658198597df85086a723d_JaffaCakes118.pdf
Resource
win10v2004-20240508-en
General
-
Target
aab2ed8ded5658198597df85086a723d_JaffaCakes118.pdf
-
Size
367KB
-
MD5
aab2ed8ded5658198597df85086a723d
-
SHA1
91b9adffb6d5a540698184d9b95cf5f7475b4b20
-
SHA256
ba7a47bda0b37affe1659f4878262cbea76fec9baf95c41aa378eda827544ed6
-
SHA512
52c049c20a716a5464ac1662ef437db2682fb81a13806ae2c828a14ab0832897b32e252e35f30cffc838acae16abcacb6d857839ba0e1bfa5f087e88ebca1630
-
SSDEEP
6144:snrZUW2eauVozh3foW2YSEE0KP5srKySCyCu7yGwJZw3jTs0MFZBnMXm:srZUW2fzhAW2sErPfh4GiKiF7MW
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2996 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 4 IoCs
pid Process 2996 AcroRd32.exe 2996 AcroRd32.exe 2996 AcroRd32.exe 2996 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\aab2ed8ded5658198597df85086a723d_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2996
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5b2f45df244ebc6ecf90f5d4037155f14
SHA18903a7a0079b2067942cab1e9e08b07f467fb42c
SHA256f5f49fcdf6b9cfb9f822be2c39a08937699239d2bccdb07c23c991f381c4c100
SHA5124033528025d26a92ad1e3ec903902de23d91f1043ba997f3e8eced0918fa74d97cdb64a70bee0caed07de634b8799e1a2d4ebc0fcc82fff22e115a5b1924eed2